$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa File: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (raw, json) Hash identifier: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw= Subject key identifier: E3:8F:A4:C3:04:8D:5C:9A:96:D8:C1:32:FB:1A:DA:60:AC:70:75:EA Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 07113E5970E8513F05006EF0CE11D4F0F2DB578C Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa Signing time: Sat 11 Jan 2025 06:00:00 +0000 ROA not before: Sat 11 Jan 2025 05:55:00 +0000 ROA not after: Sat 10 Jan 2026 06:00:00 +0000 asID: 17670 IP address blocks: 103.213.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 23:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:11:3e:59:70:e8:51:3f:05:00:6e:f0:ce:11:d4:f0:f2:db:57:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Jan 11 05:55:00 2025 GMT Not After : Jan 10 06:00:00 2026 GMT Subject: CN=E38FA4C3048D5C9A96D8C132FB1ADA60AC7075EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:a6:bc:2d:a4:42:12:3a:a4:dd:13:fe:40: 04:9d:3f:20:65:5c:16:ce:e4:bc:08:18:76:78:b6: 50:de:c9:2c:27:bc:a7:25:dd:a7:6e:3d:3e:88:f2: b9:60:e2:b3:5b:e9:f2:b0:1e:bb:97:65:71:65:61: 76:08:59:7b:94:9f:97:a4:90:53:c0:5a:b9:2f:a6: 56:12:1e:21:95:dd:c9:72:2b:7e:fd:87:27:0a:d3: 73:d2:56:d7:95:05:8a:87:dc:81:66:b0:0a:f9:a0: 7d:0c:7d:51:29:81:77:a1:42:c2:f5:d5:f7:29:f2: e1:f8:f4:10:6c:58:3d:bc:95:f1:34:49:6a:2e:c3: c8:e7:ee:fc:a5:4a:1f:4d:36:01:a3:71:3a:3c:01: 7d:8e:5c:bb:ac:dd:a9:24:00:9c:70:90:fe:6a:59: 0e:8e:d0:8f:04:d8:0a:10:fd:3c:0b:d3:4b:df:1e: 20:68:e4:dd:23:9b:0f:f5:79:38:9b:41:7e:ba:17: 28:f4:9c:bd:fa:e2:0c:f9:29:6d:90:ca:98:a8:9b: 14:e0:d8:a8:7a:41:8e:58:ef:ed:cc:9e:20:6b:5a: 99:b8:22:3e:71:50:72:ca:37:4b:89:60:e0:04:df: 67:4e:89:93:ff:7d:ef:f1:54:67:f6:da:89:f5:f3: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:A4:C3:04:8D:5C:9A:96:D8:C1:32:FB:1A:DA:60:AC:70:75:EA X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.128.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:2f:78:e5:0a:58:6c:fc:f4:fe:18:f4:6c:af:45:67:f1:31: c3:fc:a7:e9:8d:26:5b:bc:56:19:03:73:e9:26:eb:97:83:22: e1:a9:c6:18:3a:4c:73:03:83:97:4d:5f:3b:6a:16:26:66:19: c1:e1:3b:4c:9a:8b:cf:9d:41:a8:33:59:a5:25:0e:5e:60:bd: 8e:0b:2d:ad:fa:57:14:53:8e:ff:bb:41:ab:c9:6b:68:26:79: 44:38:20:6c:a9:b3:be:93:63:fb:15:ac:7e:4f:bb:95:4a:3b: 8e:2a:f1:3a:fc:f5:a1:a7:a5:74:b4:46:7c:f2:81:22:e0:fb: 7b:27:be:09:df:9e:10:93:25:41:cf:ef:bd:98:2d:f2:52:9b: db:2e:6f:78:e4:d6:3c:9d:f4:30:ac:d5:d0:b8:38:bd:72:86: 6d:be:95:c9:11:59:6c:f5:a2:55:c4:2f:6c:cb:10:4a:65:30: 39:02:dc:ef:c6:6f:4a:37:28:d2:08:5f:be:33:da:56:b7:9d: c0:f5:4f:6a:75:e2:c4:96:8a:b5:16:4d:a2:f2:95:a2:27:99: c8:28:9b:bd:5a:0d:6a:f6:8f:33:79:b0:04:90:21:8a:da:30: 0d:75:02:0b:4e:ee:69:a8:20:2b:13:5f:63:a0:04:1f:8f:71: f2:50:01:fe -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBxE+WXDoUT8FAG7wzhHU8PLbV4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTAxMTEwNTU1MDBaFw0yNjAxMTAwNjAwMDBaMDMxMTAvBgNV BAMTKEUzOEZBNEMzMDQ4RDVDOUE5NkQ4QzEzMkZCMUFEQTYwQUM3MDc1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgaa8LaRCEjqk3RP+QASdPyBl XBbO5LwIGHZ4tlDeySwnvKcl3aduPT6I8rlg4rNb6fKwHruXZXFlYXYIWXuUn5ek kFPAWrkvplYSHiGV3clyK379hycK03PSVteVBYqH3IFmsAr5oH0MfVEpgXehQsL1 1fcp8uH49BBsWD28lfE0SWouw8jn7vylSh9NNgGjcTo8AX2OXLus3akkAJxwkP5q WQ6O0I8E2AoQ/TwL00vfHiBo5N0jmw/1eTibQX66Fyj0nL364gz5KW2QypiomxTg 2Kh6QY5Y7+3MniBrWpm4Ij5xUHLKN0uJYOAE32dOiZP/fe/xVGf22on181xlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU44+kwwSNXJqW2MEy+xraYKxwdeowHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzAzMzJlMzIzMTMzMmUzMTMyMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9WAMA0GCSqG SIb3DQEBCwUAA4IBAQBsL3jlClhs/PT+GPRsr0Vn8THD/KfpjSZbvFYZA3PpJuuX gyLhqcYYOkxzA4OXTV87ahYmZhnB4TtMmovPnUGoM1mlJQ5eYL2OCy2t+lcUU47/ u0GryWtoJnlEOCBsqbO+k2P7Fax+T7uVSjuOKvE6/PWhp6V0tEZ88oEi4Pt7J74J 354QkyVBz++9mC3yUpvbLm945NY8nfQwrNXQuDi9coZtvpXJEVls9aJVxC9syxBK ZTA5Atzvxm9KNyjSCF++M9pWt53A9U9qdeLEloq1Fk2i8pWiJ5nIKJu9Wg1q9o8z ebAEkCGK2jANdQILTu5pqCArE19joAQfj3HyUAH+ -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net